fortprice[.]pics

This domain, fortprice.pics, is flagged as a high-risk generic phishing site designed to impersonate the popular gaming platform Fortnite. Analysis of the page title, 'Inventory Check | Fortnite,' indicates an attempt to deceive users into believing they are interacting with a legitimate Fortnite service. The domain appears to be part of a credential harvesting campaign, likely targeting players seeking in-game inventory verification or rewards. No specific drainer kit has been conclusively identified at this stage, but the infrastructure aligns with common phishing toolkits used in gaming-related fraud. Infrastructure analysis reveals the domain was registered on May 22, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domains. The domain resolves to the IP address 188.114.97.3, hosted on AS13335 Cloudflare, Inc., which is often leveraged to obfuscate the true origin of phishing infrastructure. VirusTotal detection metrics show 18 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (serial number E8), a common choice for both legitimate and malicious sites due to its free and automated issuance process. No Google Safe Browsing (GSB) listing is currently recorded for this domain. As of the latest assessment, fortprice.pics remains active and continues to pose a significant risk to users. The domain has been blocked by at least one security provider, but the lack of broader blocklist adoption suggests it may still evade detection in some environments. Users are advised to avoid interacting with the domain and to verify any Fortnite-related communications through official channels. Organizations should update their security policies to include this domain in deny lists and monitor for related indicators of compromise, such as connections to the IP address 188.114.97.3 or domains registered through the same registrar. The remaining risk is classified as high due to the domain's active status and targeted impersonation of a widely used gaming platform.